Packet rules concepts

Packet rules comprise both network address translation (NAT) rules and IP filtering rules. These two functions run at the IP layer of the TCP/IP stack and help protect your system against potential risks that are commonly associated with TCP/IP traffic.

• Packet rules terminology
  Here are the useful terms related to packet rules.
• Packet rules versus other iSeries security solutions
  In high-risk situations, such as securing a production system or securing communications between your iSeries server and other systems in a network, you might investigate other iSeries security solutions to broaden your protection.
• Network address translation (NAT)
  Network address translation (NAT) allows you to access the Internet safely without having to change your private network IP addresses.
• IP filtering
  Though not a fully functional firewall in itself, packet rules provide a solid component that can filter packets for your iSeries server.
• Organize NAT rules with IP filter rules
  While network address translation (NAT) and IP filtering work independently of each other, you can use NAT in conjunction with IP filtering.
• Organize multiple IP filter rules
  When you create a filter rule, it refers to a one-rule statement. A group of filter rules is called a set. The filters within a set are processed top-to-bottom, in physical order. Multiple sets are processed in physical order within a FILTER_INTERFACE statement.
• Spoof protection
  Spoofing occurs when someone attempts to access your system by pretending to be within a system that you normally trust within your own network. It is a good idea to protect any interfaces that are linked to a public network from this type of attack.